Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/0regBIVfBXFVABfEELXSK9SQr9w.roa
File: 0regBIVfBXFVABfEELXSK9SQr9w.roa (raw, json)
Hash identifier: t8fDSvJJKHgAS47tG86/SrIsfciaFuWs3jxHg3nM1HI=
Subject key identifier: D2:B7:A0:04:85:5F:05:71:55:00:17:C4:10:B5:D2:2B:D4:90:AF:DC
Certificate issuer: /CN=427ce5719caa681adbd493a8d9a38a675d6bd639
Certificate serial: 019422FAFD8AA97DBE1948C9EDAAA46FC517
Authority key identifier: 42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/0regBIVfBXFVABfEELXSK9SQr9w.roa
Signing time: Wed 01 Jan 2025 17:47:41 +0000
ROA not before: Wed 01 Jan 2025 17:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 176.52.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:fd:8a:a9:7d:be:19:48:c9:ed:aa:a4:6f:c5:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427ce5719caa681adbd493a8d9a38a675d6bd639
Validity
Not Before: Jan 1 17:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2b7a004855f0571550017c410b5d22bd490afdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9d:e2:22:8e:05:0f:bc:57:5c:2b:8d:dc:65:
5d:55:04:96:30:68:da:89:72:8d:9a:c4:73:d7:1a:
b6:80:90:4f:d6:9d:b9:8a:f3:25:f9:ea:3a:f5:17:
d8:a5:cd:03:bf:cc:08:59:4e:c2:fb:84:3f:0f:60:
8b:1d:fb:eb:f9:62:7d:c3:2e:77:33:63:22:7c:c7:
8f:4a:86:e7:74:85:10:c2:74:ce:3e:40:55:a6:b6:
44:1c:a9:27:ff:d0:41:87:69:05:74:ab:98:ae:27:
f0:43:fa:e7:68:a4:f5:2b:4a:83:28:49:ce:53:3a:
21:d2:33:6b:ca:33:ab:aa:f3:1a:00:28:2f:78:50:
2d:c6:d4:bc:75:3c:b8:f0:0b:4d:06:c3:8b:3c:65:
a9:f7:21:fa:ec:ac:18:d1:dd:6a:9c:81:fd:aa:2f:
ed:51:40:c4:e2:d0:2f:37:40:74:43:67:bd:84:43:
ea:3b:9c:af:48:7b:f1:11:01:26:2b:a5:79:f7:01:
9c:4b:bc:9d:27:d4:64:fd:71:f7:81:7f:ba:92:1b:
28:48:9f:e3:eb:d8:97:1b:52:b4:4e:df:4d:80:95:
56:4b:7c:b1:9b:da:98:0c:fc:05:bf:63:62:79:35:
13:1c:36:53:31:f7:ea:77:8d:b3:ea:55:df:df:a6:
9e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B7:A0:04:85:5F:05:71:55:00:17:C4:10:B5:D2:2B:D4:90:AF:DC
X509v3 Authority Key Identifier:
keyid:42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/0regBIVfBXFVABfEELXSK9SQr9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.52.187.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:b5:04:73:36:7e:d4:b9:94:2b:a4:2c:64:c9:1f:18:c7:28:
70:5e:e9:1d:d4:ec:35:c6:64:88:03:2e:5f:67:2d:74:7b:d5:
9e:9e:0b:69:94:c0:0f:0f:d0:45:a2:d7:d2:be:72:40:a7:ca:
aa:f1:8f:24:25:7a:df:0e:b1:4b:d7:dc:3d:ad:03:24:4d:ed:
e0:a4:1e:e6:d9:24:1e:59:20:b5:c5:ec:36:80:f2:28:15:b9:
8e:f5:c5:88:4f:58:f5:b4:c1:a7:30:a5:ed:6d:da:91:43:3a:
d9:e3:c6:a1:b4:4c:b7:91:d2:83:a1:6c:76:8d:fa:c3:50:17:
f5:9c:94:66:50:de:8f:60:20:dd:67:da:31:33:95:5d:27:d6:
35:d1:d3:43:89:47:70:12:af:7f:2d:6d:6a:a1:49:14:0d:50:
de:44:b7:09:df:85:76:81:ba:f7:e3:d2:fe:99:8d:54:5d:97:
70:d6:89:6f:b5:da:bd:05:0a:ef:70:3a:4a:9b:b7:a2:bc:19:
69:6c:81:59:3d:42:78:e3:74:3f:27:5d:3c:34:0f:a0:fa:3b:
42:e4:8a:f9:e9:4c:d9:62:3e:ac:3a:8f:ec:d5:48:ae:64:b9:
6d:16:0a:f4:c7:99:27:75:f0:84:2a:d4:92:03:8f:99:6f:19:
da:35:a6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:54:20 2025 by rpki-client